diff --git a/exposures/configs/keycloak-openid-config.yaml b/exposures/configs/keycloak-openid-config.yaml
new file mode 100644
index 0000000000..e9d66b6533
--- /dev/null
+++ b/exposures/configs/keycloak-openid-config.yaml
@@ -0,0 +1,29 @@
+id: keycloak-openid-config
+
+info:
+  name: Keycloak openid-config
+  author: rodnt
+  severity: info
+  reference: https://issues.jboss.org/browse/KEYCLOAK-571
+  tags: keycloak,config
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/.well-known/openid-configuration"
+      - "{{BaseURL}}/auth/realms/master/.well-known/openid-configuration"
+
+    matchers-condition: and
+    matchers:
+      - type: status
+        status:
+          - 200
+
+      - type: word
+        words:
+          - 'issuer'
+          - 'authorization_endpoint'
+          - 'token_endpoint'
+          - 'userinfo_endpoint'
+          - 'jwks_uri'
+        condition: and
\ No newline at end of file